Attackers can inject indirect prompts in normal-looking repositories to trick Claude Code into spawning a reverse shell.

Antivirus software used to hunt for known malware, but now it’s predicting suspicious behavior before an attack fully lands.

The most recent variants of the self-propagating attacks are named Miasma and Hades. New iterations of the Shai-Hulud supply chain attack have hit over 100 packages across the NPM and PyPI ecosystems, ...